Earlier quoted context omitted.
You're supposed to enumerate all uses of the data (and they need to be sufficiently detailed and specific). The user has a choice to opt-in/out of each of them separately. There is currently no detailed description as to what the definition of "sufficiently" is. For example: - can I use your data to build a targeting machine learning model? - can I use it to target you? - do I need specific opt-in for every model? Mo…
Defend it? What happened with "innocent until proven guilty"?
Until you prove otherwise, by means of contract, legitimate business interest, law or consent, assume private data is meant to remain private.